City: Medina
Region: Medina Region
Country: Saudi Arabia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.0.16.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19690
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;159.0.16.142. IN A
;; AUTHORITY SECTION:
. 184 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020401 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 05 09:33:42 CST 2022
;; MSG SIZE rcvd: 105Host 142.16.0.159.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.16.0.159.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 0.0.38.48 | attackspambots | rbtierfotografie.de 2600:3c00::f03c:91ff:fe26:9776 \[05/Nov/2019:15:32:52 +0100\] "POST /wp-login.php HTTP/1.1" 200 5858 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" rbtierfotografie.de 2600:3c00::f03c:91ff:fe26:9776 \[05/Nov/2019:15:32:53 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4081 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" xn--netzfundstckderwoche-yec.de 2600:3c00::f03c:91ff:fe26:9776 \[05/Nov/2019:15:40:38 +0100\] "POST /wp-login.php HTTP/1.1" 200 5652 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" xn--netzfundstckderwoche-yec.de 2600:3c00::f03c:91ff:fe26:9776 \[05/Nov/2019:15:40:38 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4096 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-06 04:19:32 |
| 72.131.28.1 | attackbotsspam | WEB_SERVER 403 Forbidden |
2019-11-06 04:00:01 |
| 105.21.33.2 | attackspam | Nov 5 15:26:20 MK-Soft-VM4 sshd[11688]: Failed password for root from 105.21.33.2 port 56210 ssh2 ... |
2019-11-06 04:07:19 |
| 78.90.67.126 | attack | ssh failed login |
2019-11-06 04:16:23 |
| 58.244.112.253 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/58.244.112.253/ CN - 1H : (633) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4837 IP : 58.244.112.253 CIDR : 58.244.0.0/15 PREFIX COUNT : 1262 UNIQUE IP COUNT : 56665856 ATTACKS DETECTED ASN4837 : 1H - 9 3H - 31 6H - 53 12H - 93 24H - 229 DateTime : 2019-11-05 15:33:00 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-06 04:14:56 |
| 103.69.44.212 | attackbots | Nov 5 20:21:00 areeb-Workstation sshd[1088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.69.44.212 Nov 5 20:21:02 areeb-Workstation sshd[1088]: Failed password for invalid user test1 from 103.69.44.212 port 53590 ssh2 ... |
2019-11-06 04:24:47 |
| 200.12.231.99 | attack | Unauthorized connection attempt from IP address 200.12.231.99 on Port 445(SMB) |
2019-11-06 04:20:33 |
| 119.18.192.98 | attackbots | Nov 5 20:40:10 vps666546 sshd\[24178\]: Invalid user guest1 from 119.18.192.98 port 23008 Nov 5 20:40:10 vps666546 sshd\[24178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.18.192.98 Nov 5 20:40:11 vps666546 sshd\[24178\]: Failed password for invalid user guest1 from 119.18.192.98 port 23008 ssh2 Nov 5 20:44:09 vps666546 sshd\[24352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.18.192.98 user=root Nov 5 20:44:11 vps666546 sshd\[24352\]: Failed password for root from 119.18.192.98 port 16309 ssh2 ... |
2019-11-06 04:01:44 |
| 180.155.23.35 | attack | Nov 5 19:29:44 server sshd\[3852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.155.23.35 user=root Nov 5 19:29:46 server sshd\[3852\]: Failed password for root from 180.155.23.35 port 11957 ssh2 Nov 5 19:47:47 server sshd\[9038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.155.23.35 user=mysql Nov 5 19:47:49 server sshd\[9038\]: Failed password for mysql from 180.155.23.35 port 2669 ssh2 Nov 5 19:52:19 server sshd\[10296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.155.23.35 user=root ... |
2019-11-06 04:09:36 |
| 70.124.38.200 | attackspambots | WEB_SERVER 403 Forbidden |
2019-11-06 04:10:48 |
| 185.176.27.18 | attackbots | 11/05/2019-14:53:11.445728 185.176.27.18 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-06 04:12:41 |
| 129.226.77.188 | attackbots | SQL Injection |
2019-11-06 04:28:52 |
| 159.65.27.252 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-11-06 04:13:00 |
| 111.240.38.163 | attackbotsspam | Unauthorized connection attempt from IP address 111.240.38.163 on Port 445(SMB) |
2019-11-06 04:35:38 |
| 200.90.81.197 | attackspam | Unauthorized connection attempt from IP address 200.90.81.197 on Port 445(SMB) |
2019-11-06 04:28:26 |